On Thu, Aug 26, 2010 at 10:51:26AM +0200, Stefan Hornburg (Racke) wrote:
On 08/24/2010 11:44 AM, Jonas Smedegaard wrote:
Hi Emmanuel,

On Mon, Aug 23, 2010 at 09:20:38PM +0200, Emmanuel Bouthenot wrote:
Package: sympa
Version: 6.0.1+dfsg-2
Severity: grave

To start correctly, task_manager.pl daemon expects /usr/share/sympa/default/ca-bundle.crt to be a valid symlink to /etc/ssl/certs/ca-certificates.crt.

ca-certificates (which provides /etc/ssl/certs/ca-certificates.crt) should be a real dependency instead of a recommend.

Is that path hardcoded or configurable?

If configurable, only recommending is the proper relation to use.


The path is configurable, but you cannot omit it.
An empty value for cafile in sympa.conf is rejected.
Otherwise a default setting kicks in:

 unless ( (defined $o{'cafile'}) || (defined $o{'capath'} )) {
       $o{'cafile'}[0] = Sympa::Constants::DEFAULTDIR . '/ca-bundle.crt';
   }

So we need in fact a real dependency. I also think this is upstream bug
resp. inconsistency in the documentation.

Until eventually fixed upstream, could we perhaps provide an empty CRL at that fallback location?

Or instead of undefining, then set capath to an empty dir.


 - Jonas

--
 * Jonas Smedegaard - idealist & Internet-arkitekt
 * Tlf.: +45 40843136  Website: http://dr.jones.dk/

 [x] quote me freely  [ ] ask before reusing  [ ] keep private

Attachment: signature.asc
Description: Digital signature

Reply via email to